Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier: fMadSDPtWg+wdtHTEzDkbWClgkrFc4DD/1fUkx1dZGs=
Subject key identifier: E2:75:C4:F9:A0:2C:3E:A8:E5:0F:5A:99:2D:4A:EE:D1:E0:EE:E9:D1
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial: 0198745045038CF4E59C1E109E7977294DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number: 1144
Signing time: Mon 04 Aug 2025 09:01:14 +0000
Manifest this update: Mon 04 Aug 2025 09:01:14 +0000
Manifest next update: Tue 05 Aug 2025 09:01:14 +0000
Files and hashes: 1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: tJimRJWbfZssBkNpcfDmSGMgde65sDR68T5AS0T86PA=)
2: hFyZQJl9hpSR8MJm5zkkVJyeSKs.roa (hash: dBm/3kMdhPMhsMOkCigtCWUETZQaJ96SgQ6JbE9wZAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:45:03:8c:f4:e5:9c:1e:10:9e:79:77:29:4d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Validity
Not Before: Aug 4 09:01:14 2025 GMT
Not After : Aug 5 09:01:14 2025 GMT
Subject: CN=e275c4f9a02c3ea8e50f5a992d4aeed1e0eee9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:10:ce:e1:a7:97:72:9e:a8:4a:7c:2d:b4:
f1:c4:1d:cd:10:0e:03:9c:19:26:13:90:5e:4c:64:
4b:3a:57:7b:9c:76:c7:62:ec:5a:2e:97:72:2e:20:
07:00:b9:36:a4:4e:a0:26:c3:18:ea:ef:75:b5:6a:
09:a1:51:ff:fa:ad:bc:c2:03:1c:ac:ae:13:20:60:
f7:4a:9c:b9:4e:67:fc:77:4b:2a:da:04:40:54:85:
8f:46:f4:c9:5a:e0:33:f7:ed:b8:42:ff:90:84:97:
c8:e5:40:99:d5:68:fd:93:62:5c:43:82:f2:6f:4e:
8a:18:d1:96:4a:45:0a:44:4e:84:59:14:18:d8:6c:
8c:39:1a:91:64:03:35:11:d9:48:8a:8b:f2:82:d2:
3a:fa:3f:b7:1c:c6:8e:43:3e:cd:2e:ca:94:d5:c2:
b1:5a:a4:86:8b:7b:4d:32:48:c3:a6:2d:29:59:2c:
96:9a:b0:6b:80:68:24:8e:d4:93:5c:f7:02:03:3e:
84:63:17:32:fb:9d:1f:0e:c7:75:88:1e:38:f6:08:
1c:96:f0:5f:6d:8b:04:ed:40:fa:bf:16:62:43:a9:
17:b5:9e:5b:ef:1b:a7:94:83:50:00:d4:52:f2:c6:
91:71:95:f3:a1:bf:25:fb:9e:6a:b6:cd:74:0d:8e:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:75:C4:F9:A0:2C:3E:A8:E5:0F:5A:99:2D:4A:EE:D1:E0:EE:E9:D1
X509v3 Authority Key Identifier:
keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2f:f0:a2:52:c8:a4:e5:e9:e6:cf:7b:1b:f3:a8:a4:83:c3:
57:5b:4e:bc:75:51:29:8a:75:f1:69:41:c5:f8:2b:5c:5f:78:
d6:78:b0:29:2a:96:55:3a:ee:99:90:49:81:5b:9c:5c:1d:7d:
0e:fb:8b:15:5d:1d:f0:c2:82:ce:d7:33:7b:4f:32:fe:a2:08:
93:af:2a:fc:68:8f:a1:dd:09:eb:38:76:1b:63:c6:20:a6:5b:
06:c3:5a:11:3a:86:b0:34:1e:ab:bc:66:eb:8b:a1:94:a6:e9:
e5:ab:ce:4f:08:64:49:32:b8:e5:87:a1:05:31:b7:47:4e:9b:
29:e9:c7:10:ce:12:be:02:9e:40:f2:40:99:e5:ca:00:71:cb:
29:d0:0c:5a:d3:66:19:b8:0d:b8:a4:d5:6c:ef:62:17:67:62:
79:6b:9b:c4:6c:b9:d6:e9:83:c3:4c:37:c0:fa:d7:27:b4:d0:
3b:51:59:0e:0d:b6:86:a7:ee:58:9c:f5:0c:44:f8:61:d5:10:
65:5c:50:fc:9b:0a:97:c5:26:20:5c:69:cc:63:6a:c1:0c:1a:
9b:58:3a:8b:de:85:c1:d7:49:ef:77:8e:e8:c4:0a:24:ed:da:
d5:4e:da:1a:61:22:d2:a8:92:01:2a:6b:a5:31:86:b3:b9:f9:
4f:da:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:34 2025 by rpki-client